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(57)Abstract: 

PURPOSE: To provide a flexible and easily changeable 
safety method for controlling the flow of information on 
a computer network. 

CONSTITUTION: A filter module specifies a safety rule 
related with traffic in a network, and accepts or drops a 
communication packet according to this safety rule in 
order to control the safety of the network. One group of 
safety rules are defined in a high level format, and 
converted into a packet filter code. This packet filter 
code is loaded in a packet filter module placed at a 
strategic point in the network. Each packet transmitted 
or inputted to those positions is inspected by executing 
an instruction in the packet filter code. The result of the 
packet filter code operation decides whether the packet 
is accepted (passed) or eliminated (dropped) and the 
trial of communication is invalidated. 
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